BSidesTLV 2024 - Compromising GitHub repositories through the actions dependency tree

Security researchers examine technical aspects of BSidesTLV 2024 - Compromising GitHub repositories through the actions dependency tree.

Summary

Compromising GitHub repositories through the Actions dependency tree.

Videos·39 min

Paul Gerste

Paul Gerste examines Zombie Workflows And Other GitHub Actions Horror Stories.

github-actionszombieworkflow+2

Black Hat Europe 2025·37 min

Rami McCarthy · Amitai Cohen

Engineers explore architecture and security mechanisms for The Forensic Trail On GitHub: Hunting For Supply Chain Activity.

supply-chainforensictrail+3

FIRST·23 min

Analysts investigate attack surfaces and defenses concerning Breaking the Build: How Attackers Abuse GitHub Actions.

github-actionsbreakingbuild+3